Google Cloud Native is in preview. Google Cloud Classic is fully supported.
google-native.managedidentities/v1alpha1.Domain
Explore with Pulumi AI
Google Cloud Native is in preview. Google Cloud Classic is fully supported.
Creates a Microsoft AD Domain in a given project. Operation Auto-naming is currently not supported for this resource.
Create Domain Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Domain(name: string, args: DomainArgs, opts?: CustomResourceOptions);
@overload
def Domain(resource_name: str,
args: DomainArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Domain(resource_name: str,
opts: Optional[ResourceOptions] = None,
locations: Optional[Sequence[str]] = None,
reserved_ip_range: Optional[str] = None,
audit_logs_enabled: Optional[bool] = None,
authorized_networks: Optional[Sequence[str]] = None,
domain_name: Optional[str] = None,
labels: Optional[Mapping[str, str]] = None,
managed_identities_admin_name: Optional[str] = None,
project: Optional[str] = None)
func NewDomain(ctx *Context, name string, args DomainArgs, opts ...ResourceOption) (*Domain, error)
public Domain(string name, DomainArgs args, CustomResourceOptions? opts = null)
public Domain(String name, DomainArgs args)
public Domain(String name, DomainArgs args, CustomResourceOptions options)
type: google-native:managedidentities/v1alpha1:Domain
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args DomainArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args DomainArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args DomainArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args DomainArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args DomainArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var exampledomainResourceResourceFromManagedidentitiesv1alpha1 = new GoogleNative.Managedidentities.V1Alpha1.Domain("exampledomainResourceResourceFromManagedidentitiesv1alpha1", new()
{
Locations = new[]
{
"string",
},
ReservedIpRange = "string",
AuditLogsEnabled = false,
AuthorizedNetworks = new[]
{
"string",
},
DomainName = "string",
Labels =
{
{ "string", "string" },
},
ManagedIdentitiesAdminName = "string",
Project = "string",
});
example, err := managedidentitiesv1alpha1.NewDomain(ctx, "exampledomainResourceResourceFromManagedidentitiesv1alpha1", &managedidentitiesv1alpha1.DomainArgs{
Locations: pulumi.StringArray{
pulumi.String("string"),
},
ReservedIpRange: pulumi.String("string"),
AuditLogsEnabled: pulumi.Bool(false),
AuthorizedNetworks: pulumi.StringArray{
pulumi.String("string"),
},
DomainName: pulumi.String("string"),
Labels: pulumi.StringMap{
"string": pulumi.String("string"),
},
ManagedIdentitiesAdminName: pulumi.String("string"),
Project: pulumi.String("string"),
})
var exampledomainResourceResourceFromManagedidentitiesv1alpha1 = new Domain("exampledomainResourceResourceFromManagedidentitiesv1alpha1", DomainArgs.builder()
.locations("string")
.reservedIpRange("string")
.auditLogsEnabled(false)
.authorizedNetworks("string")
.domainName("string")
.labels(Map.of("string", "string"))
.managedIdentitiesAdminName("string")
.project("string")
.build());
exampledomain_resource_resource_from_managedidentitiesv1alpha1 = google_native.managedidentities.v1alpha1.Domain("exampledomainResourceResourceFromManagedidentitiesv1alpha1",
locations=["string"],
reserved_ip_range="string",
audit_logs_enabled=False,
authorized_networks=["string"],
domain_name="string",
labels={
"string": "string",
},
managed_identities_admin_name="string",
project="string")
const exampledomainResourceResourceFromManagedidentitiesv1alpha1 = new google_native.managedidentities.v1alpha1.Domain("exampledomainResourceResourceFromManagedidentitiesv1alpha1", {
locations: ["string"],
reservedIpRange: "string",
auditLogsEnabled: false,
authorizedNetworks: ["string"],
domainName: "string",
labels: {
string: "string",
},
managedIdentitiesAdminName: "string",
project: "string",
});
type: google-native:managedidentities/v1alpha1:Domain
properties:
auditLogsEnabled: false
authorizedNetworks:
- string
domainName: string
labels:
string: string
locations:
- string
managedIdentitiesAdminName: string
project: string
reservedIpRange: string
Domain Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Domain resource accepts the following input properties:
- Locations List<string>
- Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
- Reserved
Ip stringRange - The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
- Audit
Logs boolEnabled - Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
- List<string>
- Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.
- Domain
Name string - The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.
- Labels Dictionary<string, string>
- Optional. Resource labels to represent user provided metadata
- Managed
Identities stringAdmin Name - Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified
setupadmin
would be used. - Project string
- Locations []string
- Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
- Reserved
Ip stringRange - The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
- Audit
Logs boolEnabled - Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
- []string
- Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.
- Domain
Name string - The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.
- Labels map[string]string
- Optional. Resource labels to represent user provided metadata
- Managed
Identities stringAdmin Name - Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified
setupadmin
would be used. - Project string
- locations List<String>
- Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
- reserved
Ip StringRange - The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
- audit
Logs BooleanEnabled - Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
- List<String>
- Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.
- domain
Name String - The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.
- labels Map<String,String>
- Optional. Resource labels to represent user provided metadata
- managed
Identities StringAdmin Name - Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified
setupadmin
would be used. - project String
- locations string[]
- Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
- reserved
Ip stringRange - The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
- audit
Logs booleanEnabled - Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
- string[]
- Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.
- domain
Name string - The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.
- labels {[key: string]: string}
- Optional. Resource labels to represent user provided metadata
- managed
Identities stringAdmin Name - Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified
setupadmin
would be used. - project string
- locations Sequence[str]
- Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
- reserved_
ip_ strrange - The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
- audit_
logs_ boolenabled - Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
- Sequence[str]
- Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.
- domain_
name str - The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.
- labels Mapping[str, str]
- Optional. Resource labels to represent user provided metadata
- managed_
identities_ stradmin_ name - Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified
setupadmin
would be used. - project str
- locations List<String>
- Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
- reserved
Ip StringRange - The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
- audit
Logs BooleanEnabled - Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
- List<String>
- Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.
- domain
Name String - The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.
- labels Map<String>
- Optional. Resource labels to represent user provided metadata
- managed
Identities StringAdmin Name - Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified
setupadmin
would be used. - project String
Outputs
All input properties are implicitly available as output properties. Additionally, the Domain resource produces the following output properties:
- Create
Time string - The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide
- Fqdn string
- Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.
- Id string
- The provider-assigned unique ID for this managed resource.
- Name string
- Unique name of the domain in this scope including projects and location using the form:
projects/{project_id}/locations/global/domains/{domain_name}
. - State string
- The current state of this domain.
- Status
Message string - Additional information about the current status of this domain, if available.
- Trusts
List<Pulumi.
Google Native. Managedidentities. V1Alpha1. Outputs. Trust Response> - The current trusts associated with the domain.
- Update
Time string - Last update time. Synthetic field is populated automatically by CCFE.
- Create
Time string - The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide
- Fqdn string
- Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.
- Id string
- The provider-assigned unique ID for this managed resource.
- Name string
- Unique name of the domain in this scope including projects and location using the form:
projects/{project_id}/locations/global/domains/{domain_name}
. - State string
- The current state of this domain.
- Status
Message string - Additional information about the current status of this domain, if available.
- Trusts
[]Trust
Response - The current trusts associated with the domain.
- Update
Time string - Last update time. Synthetic field is populated automatically by CCFE.
- create
Time String - The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide
- fqdn String
- Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.
- id String
- The provider-assigned unique ID for this managed resource.
- name String
- Unique name of the domain in this scope including projects and location using the form:
projects/{project_id}/locations/global/domains/{domain_name}
. - state String
- The current state of this domain.
- status
Message String - Additional information about the current status of this domain, if available.
- trusts
List<Trust
Response> - The current trusts associated with the domain.
- update
Time String - Last update time. Synthetic field is populated automatically by CCFE.
- create
Time string - The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide
- fqdn string
- Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.
- id string
- The provider-assigned unique ID for this managed resource.
- name string
- Unique name of the domain in this scope including projects and location using the form:
projects/{project_id}/locations/global/domains/{domain_name}
. - state string
- The current state of this domain.
- status
Message string - Additional information about the current status of this domain, if available.
- trusts
Trust
Response[] - The current trusts associated with the domain.
- update
Time string - Last update time. Synthetic field is populated automatically by CCFE.
- create_
time str - The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide
- fqdn str
- Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.
- id str
- The provider-assigned unique ID for this managed resource.
- name str
- Unique name of the domain in this scope including projects and location using the form:
projects/{project_id}/locations/global/domains/{domain_name}
. - state str
- The current state of this domain.
- status_
message str - Additional information about the current status of this domain, if available.
- trusts
Sequence[Trust
Response] - The current trusts associated with the domain.
- update_
time str - Last update time. Synthetic field is populated automatically by CCFE.
- create
Time String - The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide
- fqdn String
- Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.
- id String
- The provider-assigned unique ID for this managed resource.
- name String
- Unique name of the domain in this scope including projects and location using the form:
projects/{project_id}/locations/global/domains/{domain_name}
. - state String
- The current state of this domain.
- status
Message String - Additional information about the current status of this domain, if available.
- trusts List<Property Map>
- The current trusts associated with the domain.
- update
Time String - Last update time. Synthetic field is populated automatically by CCFE.
Supporting Types
TrustResponse, TrustResponseArgs
- Create
Time string - The time the instance was created.
- Last
Known stringTrust Connected Heartbeat Time - The last heartbeat time when the trust was known to be connected.
- Selective
Authentication bool - The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.
- State string
- The current state of this trust.
- State
Description string - Additional information about the current state of this trust, if available.
- Target
Dns List<string>Ip Addresses - The target dns server ip addresses which can resolve the remote domain involved in trust.
- Target
Domain stringName - The fully qualified target domain name which will be in trust with current domain.
- Trust
Direction string - The trust direction decides the current domain is trusted, trusting or both.
- Trust
Handshake stringSecret - Input only, and will not be stored. The trust secret used for handshake with target domain.
- Trust
Type string - The type of trust represented by the trust resource.
- Update
Time string - Last update time.
- Create
Time string - The time the instance was created.
- Last
Known stringTrust Connected Heartbeat Time - The last heartbeat time when the trust was known to be connected.
- Selective
Authentication bool - The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.
- State string
- The current state of this trust.
- State
Description string - Additional information about the current state of this trust, if available.
- Target
Dns []stringIp Addresses - The target dns server ip addresses which can resolve the remote domain involved in trust.
- Target
Domain stringName - The fully qualified target domain name which will be in trust with current domain.
- Trust
Direction string - The trust direction decides the current domain is trusted, trusting or both.
- Trust
Handshake stringSecret - Input only, and will not be stored. The trust secret used for handshake with target domain.
- Trust
Type string - The type of trust represented by the trust resource.
- Update
Time string - Last update time.
- create
Time String - The time the instance was created.
- last
Known StringTrust Connected Heartbeat Time - The last heartbeat time when the trust was known to be connected.
- selective
Authentication Boolean - The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.
- state String
- The current state of this trust.
- state
Description String - Additional information about the current state of this trust, if available.
- target
Dns List<String>Ip Addresses - The target dns server ip addresses which can resolve the remote domain involved in trust.
- target
Domain StringName - The fully qualified target domain name which will be in trust with current domain.
- trust
Direction String - The trust direction decides the current domain is trusted, trusting or both.
- trust
Handshake StringSecret - Input only, and will not be stored. The trust secret used for handshake with target domain.
- trust
Type String - The type of trust represented by the trust resource.
- update
Time String - Last update time.
- create
Time string - The time the instance was created.
- last
Known stringTrust Connected Heartbeat Time - The last heartbeat time when the trust was known to be connected.
- selective
Authentication boolean - The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.
- state string
- The current state of this trust.
- state
Description string - Additional information about the current state of this trust, if available.
- target
Dns string[]Ip Addresses - The target dns server ip addresses which can resolve the remote domain involved in trust.
- target
Domain stringName - The fully qualified target domain name which will be in trust with current domain.
- trust
Direction string - The trust direction decides the current domain is trusted, trusting or both.
- trust
Handshake stringSecret - Input only, and will not be stored. The trust secret used for handshake with target domain.
- trust
Type string - The type of trust represented by the trust resource.
- update
Time string - Last update time.
- create_
time str - The time the instance was created.
- last_
known_ strtrust_ connected_ heartbeat_ time - The last heartbeat time when the trust was known to be connected.
- selective_
authentication bool - The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.
- state str
- The current state of this trust.
- state_
description str - Additional information about the current state of this trust, if available.
- target_
dns_ Sequence[str]ip_ addresses - The target dns server ip addresses which can resolve the remote domain involved in trust.
- target_
domain_ strname - The fully qualified target domain name which will be in trust with current domain.
- trust_
direction str - The trust direction decides the current domain is trusted, trusting or both.
- trust_
handshake_ strsecret - Input only, and will not be stored. The trust secret used for handshake with target domain.
- trust_
type str - The type of trust represented by the trust resource.
- update_
time str - Last update time.
- create
Time String - The time the instance was created.
- last
Known StringTrust Connected Heartbeat Time - The last heartbeat time when the trust was known to be connected.
- selective
Authentication Boolean - The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.
- state String
- The current state of this trust.
- state
Description String - Additional information about the current state of this trust, if available.
- target
Dns List<String>Ip Addresses - The target dns server ip addresses which can resolve the remote domain involved in trust.
- target
Domain StringName - The fully qualified target domain name which will be in trust with current domain.
- trust
Direction String - The trust direction decides the current domain is trusted, trusting or both.
- trust
Handshake StringSecret - Input only, and will not be stored. The trust secret used for handshake with target domain.
- trust
Type String - The type of trust represented by the trust resource.
- update
Time String - Last update time.
Package Details
- Repository
- Google Cloud Native pulumi/pulumi-google-native
- License
- Apache-2.0
Google Cloud Native is in preview. Google Cloud Classic is fully supported.